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Amendments to the Claims: 

This listing of Claims will replace all prior versions, and listings, of claims in the 
application: 

1. (Currently Amended) A method for control of usage of content, 
wherein protected content exists being usage restricted by one or more first usage 
rights specifying one or more usage restrictions and/or one or more usage permissions 
of the protected content at a user device, the method comprising the steps of 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
environment of the user device and by accessing the decrypted content in the 
first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more 
usage permissions of the content at a recipient device and the at least one 
defined usage right comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or 
more first usage rights, 

- generating at the user device integrity protection information for the at least 
one defined usage right, 

- encrypting the content with a content encryption key, 

- encrypting the content encryption key with a key encryption key associated 
with the recipient device and/or an operator of the recipient device, 

- communicating the encrypted content, the at least one defined usage right, 
the encrypted content encryption key, and the integrity protection information 
to the recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the 
recipient device, 
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- verifying at the recipient device the integrity of the at least one defined 
usage right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with 
a decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 

- using the content at the recipient device according to the applied at least 
one usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction, 

- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- communicating an indication of the restricting or blocking or deleting from 
the recipient device to the user device, the indication comprising the at least 
one received usage right, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the 
temporal restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , wherein the restricting, blocking or deleting step, 
the second generating step, the second communicating step, the second 
applying step, and the abolishing step are executed in seouence one after 
another . 

2-4. (Canceled) 

5. (Previously Presented) The method according to claim 1, further 
comprising the steps of 
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- recognizing by the user device that the at least one received usage right 
relates to the at least one defined usage right and 

- using the content at the user device according to the at least one first usage 
right even within the time upon the expiration of the temporal restriction. 

6. (Previously Presented) The method according to claim 1, wherein the 
step of communicating the at least one defined usage right to the recipient device is 
executed by 

- communicating the at least one defined usage right from the user device to 
a rights server, 

- associating by the rights server the at least one defined usage right with 
authorization information indicating a rights issuer authorization for the at 
least one defined usage right to the recipient device, 

- communicating the at least one defined usage right and the authorization 
information from the rights server to the recipient device, 

and the recipient device verifies the rights issuer authorization based on the 
received authorization information. 

7. (Previously Presented) The method according to claim 1 further 
comprising the step of communicating to a charging server an indication about the 
communication of the at least one defined usage right. 

8. (Previously Presented) The method according to claim 1, wherein an 
input unit of the user device receives at least one instruction from a user for defining 
the at least one usage right. 

9. (Previously Presented) The method according to claim 1 further 
comprising the step of defining at least one further usage right for at least one further 
recipient device for controlling the usage of the content at the at least one further 
device. 
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10. (Currently Amended) A user device for controlling a usage of content 
at a recipient device, the user device comprising: 

at least a transmission unit and a processing unit and further a receiving 
unit, wherein protected content exists being usage restricted by one or more first 
usage rights specifying one or more usage restrictions and/or one or more usage, 
permissions of the protected content at the user device, and 

the processing unit being adapted to obtain the content from the protected 
content in accordance with the one or more first usage rights by decrypting the 
protected content with a first content encryption key in a first secure environment of 
the user device and by accessing the decrypted content in the first secure 
environment, to define at least one usage right specifying one or more usage 
restrictions and/or one or more usage permissions of the content at the recipient 
device, the at least one defined usage right comprising a temporal restriction, to 
verify that the at least one defined usage right is a subset of the one or more first 
usage rights, to generate integrity protection information for the at least one defined 
usage right, to encrypt the content with a content encryption key, to encrypt the 
content encryption key with a key encryption key associated with the recipient device 
and/or an operator of the recipient device, the transmission unit being adapted to 
send the encrypted content, the at least one defined usage right, the encrypted 
content encryption key, and the integrity protection information to the recipient 
device, and the processing unit being adapted to restrict the one or more first usage 
rights in consequence of the definition and/or the communication of the at least one 
defined usage right to the recipient device, the receiving unit is adapted to receive 
an indication of a restricting or a blocking or a deleting of the at least one defined 
usage rights [[at]] from the recipient device before the expiry of the temporal 
restriction, wherein the indication comprises at least one received usage right that is 
a subset of the at least one defined usage right, the processing unit is adapted to 
apply the at least one received usage right after the receipt of the indication from the 
recipient device until the expiry of the temporal restriction and to abolish the 
restriction of the one or more first usage rights the when temporal restriction expires^ 
wherein the receiving unit receives the indication of the restricting or the blocking or 
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the deleting of the at least one defined usage rights, the processing unit applies the 
at least one received usage right until the expiry of the temporal restriction and 
abolishes the restriction of the one or more first usage rights when temporal 
restriction expires in seguence one after another . 

11. (Previously Presented) The user device according to claim 10, the 
user device being adapted to load the protected content via a receiving unit and to 
store the protected content at a storage and/or to store pre-installed protected 
content at the storage. 

12-14. (Canceled) 

15. (Previously Presented) The user device according to claim 10, the 
user device being adapted to recognize that the at least one received usage right 
relates to the at least one defined usage right and to use the content according to 
the at least one first usage right even within the time upon the expiration of the 
temporal restriction. 

16. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to generate an instruction for a rights server to 
associate the at least one defined usage right with authorization information 
indicating a rights issuer authorization for the at least one defined usage right to the 
recipient device and to communicate the at least one defined usage right and the 
authorization information to the recipient device, and the transmission unit is 
adapted send the instruction and the at least one defined usage right to the rights 
server. 

17. (Previously Presented) The user device according to claim 10, wherein 
the transmission unit is adapted to send to a charging server an indication about the 
communication of the at least one defined usage right to the recipient device. 



Page 7 of 18 



Attorney Docket No. P18484-US1 
11-5012 



18. (Previously Presented) The user device according to claim 10, the 
user device further comprising an input unit which is adapted to receive at least one 
instruction from a user and the processing unit is adapted to define the at least one 
usage right based on the at least one instruction from the user. 

19. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to define at least one further usage right for at least 
one further recipient device for controlling the usage of the content at the at least 
one further recipient device. 

20. (Currently Amended) A recipient device for a controlled usage of 
content, the recipient device comprising at least a receiving unit and processing unit 
and further a transmission unit, wherein the receiving unit is adapted to receive the 
content being encrypted by a content encryption key, at least one defined usage 
right specifying one or more usage restrictions and/or usage permissions of the 
content and the at least one defined usage right comprising a temporal restriction, a 
content encryption key being encrypted by a key encryption key associated with the 
recipient device and/or an operator of the recipient device, and integrity protection 
information for the at least one defined usage right, the processing unit is adapted to 
verify the integrity of the at least one usage right based on the integrity protection 
information, to decrypt the encrypted content encryption key with a decryption key 
corresponding to the key encryption key, to decrypt the encrypted content with the 
content encryption key in a secure environment, to apply the at least one defined 
usage right to the content in the secure environment, and to use the content 
according to the applied at least one defined usage right, to restrict or block or delete 
the at least one defined usage right before the temporal restriction expires, to 
generate an indication of the restricting or the blocking or the deleting, to generate at 
least one received usage right that is a subset of the at least one defined usage right 
for the indication, and the transmission unit is adapted to send the indication 
comprising the at least one received usage right to the user device , wherein the 
recipient device restricts or blocks or deletes the at least one defined usage rights. 
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generates the indication of the restricting or the blocking or the deleting, generates 
the at least one received usage right that is a subset of the at least one defined 
usage right for the indication, and sends the indication comprising the at least one 
received usage right to the user device in seguence one after another. 

21. (Previously Presented) The recipient device according to claim 20, 
wherein the processing unit is adapted to generate an alert if the integrity of the at 
least one defined usage right is violated and to initiate an indication of the alert at an 
output unit. 

22-23. (Canceled) 

24. (Previously Presented) The recipient device according to claim 20, 
wherein the receiving unit is adapted to receive the at least one defined usage right 
and associated authorization information indicating a rights issuer authorization from 
a rights server and the processing unit is adapted to verify the rights issuer 
authorization based on the received authorization information. 

25 -28 (Canceled) 

29. (Currently Amended) A method for control of usage of content, wherein 
protected content exists being usage restricted by one or more first usage rights 
specifying one or more usage restrictions and/or one or more usage permissions of the 
protected content at a user device, the method comprising the steps of 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
environment of the user device and by accessing the decrypted content in the 
first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more 
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usage permissions of the content at a recipient device and the at least one 
defined usage right comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or 
more first usage rights, 

- generating at the user device integrity protection information for the at least 
one defined usage right, 

- encrypting the content with a content encryption key, 

- encrypting the content encryption key with a key encryption key associated 
with the recipient device and/or an operator of the recipient device, 

- communicating the encrypted content, the at least one defined usage right, 
the encrypted content encryption key, and the integrity protection information 
to the recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the 
recipient device, 

- verifying at the recipient device the integrity of the at least one defined 
usage right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with 
a decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 

- using the content at the recipient device according to the applied at least 
one usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction, 

• generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- communicating an indication of the restricting or blocking or deleting from 
the recipient device to the user device, the indication comprising the at least 
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one received usage right, without returning the encrypted content to the user 
device, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the 
temporal restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , wherein the restricting, blocking or deleting step, 
the second generating step, the second communicating step, the second 
applying step, and the abolishing step are executed in seguence one after 
another 
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